Enable Java Unlimited Cryptographic Strengths

To allow the Enterprise Management Agent to communicate with the OKM, you must enable its Java installation for stronger cryptography.

1. Log in to the Enterprise Management Agent as the oracle_user and locate the file named emd.properties in the Enterprise Management Agent's installation directory.
2. Search the file for JAVA_HOME and make a note of this location. For example, in file /export/home/Agent/agent_inst/sysman/config/emd.properties, there is this entry:

   JAVA_HOME=/export/home/oracle/Agent/core/12.1.0.3.0/jdk

3. Check the Java version. This is needed to know which files to download. To find out the Java version, run java -version in $JAVA_HOME/bin. For example, using the previous JAVA_HOME setting,

   /export/home/oracle/Agent/core/12.1.0.3.0/jdk/bin/java -version

   returns

   java version 1.6.0_43

   Only the first two numbers are significant (1.6).

4. Download the corresponding Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files for that version of Java. Download from the Oracle Technology Network at: http://www.oracle.com/technetwork/java/javase/downloads

   For Java 1.6, download Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6: http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html F

   or Java 1.7, download Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7: http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

5. Unzip the download and follow the instructions.
6. If the OKM Operator's certificates that were exported are not yet accessible to the Enterprise Management Agent with the OKM plug-in deployed, copy or move them now to a location that can be reached by the Enterprise Management Agent's user ID. These files must also be owned by the Enterprise Management Agent's user ID (who you are logged in as).